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ITL^. s^ssr *™ .yt. --^rrfacLreL 

Uni ted" states Postal s ^^^ 'codes lor X25y J '"^rf 
would use two-dlmen ^f^ for ^ on -Based indicia Program (1KP) ^ ^ a 
specifications for the ^ indU stry. 'Indicia is the r Posta l 
X Lt aune for cogent by the ^ & J^ te d $150 

po^age mark, » « n L metering system to stem an 

Service is "^"^"S t fraud. . r ,,. d for a PC-based system 

USPS spokesperson admits ^ rece - ving 

determined. oro gram manager for us *=' , from various 

Ro y sordon, IBIP prog operation' proposals r r ° m advantage. At 

and evaluating the concept or the proposed svste ? *° for e a i p ha- or 
• manufacturers vying to *%t\li had yet been accept ^ ^/the product, • 

systems by summer. ec.ro „ r tainally proposed by 

of operation' proposals- PC-based met «^ 9 1 ^° 5 been'hastened 

T d S ofr S S-at?ended public ^.^^ Ual po-W ^ 
USPS at a ^"tfannouncement in May « 9 * 'i iM9 in a process called 
by the Service s fay Marc , 9 ; ? mechanical 

^certlf^o^ -e tlmeta d ble g -^—^ o^e^iler and the type of 

postage meters varies 
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postage " meter being used. 

£ecerfi"cation ^sTresult of a 1994 Government Accounting Office 
(GA.O) report that alerted Congress to postage meter fraud that some 
sources say accounts for up to $150 million in lost revenue to the USPS 

eVery T^ere'are currently 1,518,800 postage meters in use. About 52% of 
those are mechanically-based. Decertification is widely viewed as an 
opportunity to created next generation postage ^ter «oijr. xng 
digital printing and address encryption for security with the ability to 
download postage value from the USPS over the Internet. 

download po* g editor of the Business Mailers Review (BMP.) has 

closed followed the development of IBIP. said, ■! think a lot of people 
understand why the postal service is heading in this direction^ They need 
more secure metering. The technology is very interesting and it's really 
aoing to open up the market to some more players . 

9 Muth said the postage meter market has been dominated by four 
olavers for the last 20 years: Pitney-Bowes (which created the first 
oostaqe meter in 1920), with an 85% market share; Neopost; 
Francotyp-Postalia and Ascom-Hasler. Historically, these four companies 
have coventrated on large corporations and volume mailers So, although 
there are more than 12 million businesses in the United States, there are 
onlv 1 5 million postage meters. BMR estimates there are approximately 
six million small office/home office (SOHO) mailers in the U.S. 

■Now with PC-based postage , new companies like E-stamp are looking 
to tap into a whole new market base. That's where people see an exciting 
opportunity," said Muth. [see sidebar for postage meter manufacturers 

comments] poten tially have a bigger impact on stamp usage than 

postage meters. 1 said Gordon. 'It appears that some of the products under 
development are being targeted toward the SOHO market. We are initiating 
customer rocus groupl and studies with that market to see what the reaction 

t0 ^TL'co^nt^erio^for^he first draft xbip specifications ended !ast 
November. The USPS received hundreds of comments from the industry and is 
unsure when the second draft specification will be issued. After a 90- to 
120-day comment period, a final specification will be issued^ But that 
Process may take more than a year to reach a conclusion, said Gordon 
P There are some limitations to the proposed system, particularly with 
respect to volume mailers. . . . , 

The address must be printed at the same time as indicia, because the 
encryption of the 2D code is based on the address. Therefore, the system 
won't work with a window envelope, an envelope with a preprinted address or 
a handwritten address. 

PC printers may have trouble handling pre-stuffed envelopes. 

The proposed system requires verification of mailing addresses using 
a CD-ROM supplied and updated quarterly by USPS. If the CD-ROM does not 
verify an address, the mailer will need to use a stamp. 

Non-disclosure agreements prohibit Gordon from sayxng which companies 
had submitted working concepts. AUTOMATIC I.D. NEWS determined the two 
companies farthest along in the development process seem to be the 
Houston-based upstart E-stamp, and industry heavyweight Pitney-Bowes . 
Representatives of Neopost and Francotyp-Postalia indicated they were 
involved in the process, but are biding their time until a more definitive 
specification is released. A representative from Ascom-Hasler had not 
returned AUTOMATIC I.D. NEWS' phone calls at press time. 

The bottom line , . 

While many parties to the competition remain somewhat tight-lipped 
about their progress, it is clear that all accept some form of PC-base.d. 
postage metering system will soon be a reality. Except for enthusiastic 
E-stamp, the four existing postage meter companies seem to be grimly 
girding themselves for a major retooling of their industry. 

USPS • Gordon says everything's up for grabs, as the Postal Service 
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m e a ns to ^erate . control V.XU. dependent tne - 

• ^ rt reqister and to mciuae d 



a mail item. 



5 

gj^^p^ . bed by way of 

A„ embodiment of the invention will be 
example with reference to the drawings xn whxch. 
, is a block diagram of a postage meter 
l0 ^ Violates ™— " 

^ici- ^^i^cin,, steps =a«i- ont in 

• n Hnt-ed indicium ana 

Figure 5 a printing a postage 

alternative steps carried out m p 



indicium. 



20 



Refer rxng first to 9 account ing and control means 

mete r includes ^™ 1Q operating under program 
comprising a --o^proces^ only P weraory <*OM) xi. * 
routines stored xn re rnmands and data by 



of 
14 
of 



routine- ^ o£ COTmands and data 

keyboard 12 P^ov ided to enable display 

a user and . » » ^ access „ «»H> 

is provxded for use « nostaqe meter 

during operation of the postage 
30 temporary data during y provided for 

. , _ rinniicated memories 15, i& ate 

Non-volatile duplicate lat - ina to use of the 

«f critical data relating to 
the storage of criti retained even 

when the postage meter is not p relation to use of 

35 l0 „«i.. out -county -™ a _ cs o£ 
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by the postal authority or another carrier. Accounting 
data relating to use of the postage meter for printing 
franking indicia representing postage charges for mail 
items and any other critical data to be retained is stored 
5 in the non- volatile memories 15. 16. The accounting data 
includes a value of credit, an accumulated total of value 
used by the meter in franking mail items, a counc of the 
number of mail items franked by' the meter and a count of 
the number of mail items franked with a postage charge in 

10 excess of a predetermined value. The value of credit may 
be a value of credit available for use by the meter and 
stored in a descending credit register. The accumulated 
total value used by the meter is stored in an ascending 
tote register, the count of items is stored in a piece 

15 count register and the count of items franked with a 
postage charge in excess of a predetermined value is 
stored in a large items register. Alternatively, if 
desired, instead of a descending register storing a value 
of credit, available for use by the meter, a total value of 

20 credit entered into the meter may be stored in an 
ascending credit register. 

As is well known in the postage meter art, each of the 
registers referred to hereinbefore for storing accounting 
data is replicated in order to enable integrity of the 
accounting data to be maintained even in the event of a 
fault or termination of power to the meter during a 
franking operation. Two replications of each of the 
registers are provided in each of the memory devices 15, 
30 16. 

A motor controller 17 is controlled by the microprocessor 
10 to control operation of motors 18 driving feeding means 
(not shown) for feeding a mail item past a digital print 

35 head 19. The digital print head 19 may be an impact print 
head in which print elements are impelled selectively to 

impact with an ink ribbon to transfer ink to a mail item 
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j ^^.ri for example 

or any other »» of preferred to use . 

roay be a non-i-»P«et print head ^ ^ h . aa 

non-impact pri« -ad ce r . T he the™! ^ 

operating as described > «»' sal . cC ively energxsabl. 
/ead includes a P*-f 7 0 ° sensors 21 a., P-vided to 
thecal P"n t in9 2 ° £ mail item . The sensors 

sense and monitor feeding o « ^ „ en abl. the 

provide signal Co the ^ x . and to 

microprocessor to =—°\^ 9 print elements 20 of the 
energise selectively c« * ^ it .,„ 1S fed 

print head at appropriate « . b £e(i pa8t: =he 

ast the print head. As « - ^ „ aurt „g a 

chermal printing element s 20 ° £ * oucpuCS on line 22. 

printing operation, the - = ^ princ data srgnaXs 

in each of a series of P^"^ ting ale mencs 20 «h«* 
meeting those ones o t« P ng cycla . » 

„re to be energised ,n each resp ^ ^ 

pu xse of electrical power BOUCCS 23 when . 

thermal printing .preprocessor on a line 

strobe signal is supplied by t lng a tar -code, a 

24 " the / r r«aeert the-ax printing events .» 
piurality of accent _ such as M prl 

energised m selected * represent data . 1 

narr ow and wide bars as ^ case the sam . 

25 bars .nay H be of ar e energised in each 

number of thermal printing ele when u l8 

of the selected P'™ aiffer e„t lengths, the 

desired to print bars of selected ed in each 

number of thermal printing ele- ^ Qrrespono „ che 

30 selected P^-^^r to be printed, 
required length of bar to be p 

„ t-he postage 

• as is well known in tne w 

It will be appreciated, as operate in a secure 

me ter art, t« "T^. « use ~~ 

3 5 manner and be ^^fj utilising the postage meter to 

fraudulently for example by ^ ^ nQ 

print franking indict on mail 
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rh , rae has been accounted for by the 
corresponding postage charge has a postage 

arcordincrly those parts or me ^ 
accounting means. accordxj^ ^ unauthorised 

meter required to be secur 

^ n a secure housing ^» - 
tampering are housed in a secur 

5 IB s „ call e d — ir^r 

time a franking operaaon is to be p dete r««ination 
processor carries out a routine 

- — " ~ « o-rat^n in 

10 register is sufficient to P . ^ . tem to 

aspect of the required ^^" f^ t in the credit 

j rf r he value ot crem u 

be performed. If t Eranking operation is 

register is sufficient. the registers is 
continued and the —nung a ^ ^ 
nnh -p^ r the postage cnargt; 

15 updated to account for t P ^ ^ ±n c „ e 

indicia is printed^ £~ co permit ch e franking 

credit register is no age cha rge to be 

operation in respect of the req franking 
p P erforme d. the operation is .nated and ^ 

• *- nrinted Where a value ut 

20 indicia is not printed descending register, 

£ or use in franking is stored m available is 

the check as to sufficiency of the c 

effected by a - ^ valu e of 

is le6 s than the credit agister the 

25 credit is stored in an "^^f?. ef£ec ted by . 

^termination of. heth hepostage an<J the 

■ — - - tote re9ister - 

30 » addition to the security against ™^ ^secure 
print postage indicia J^T Zi^l security in 

construction of the postage meter a 

tes pect of the posta ge »*^£™ M /ata included in 
35 -presented is^ovi = ^ co b6 prl d i che 

indicia ^encrypted. The postage data together with the 

a „™.r=^»^™^•»•^ ! '' , "•• OT:S0 " W,! "^ T ' O "^*' : '" ^ 
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information is noc y ^- llin ran be verified 

„ ho iditv of an indicium can 
the indicia. The validity o Drin ted data 

encryption oE the prmL-eu 
carrying out the same enc yp information 



by canyx.^ — resultant encrypted 

and then comparing the resul 

^v,/-^wr^t-^ci information printeu 
„ith the encrypted i validity of the indict 

It the comparison is successtu suc cess£ul 
L0 ts verified whereas if the n °% B . process 

the indicium is regarded a, net -™= o ^ sired . 
£or eeneratioh of the encrypted ^nf™- ^ 

may be a roversibie ^^"ZZ » yi.W the 
encrypted J ^ en ^ ypcion process is 

1S original da a^ When a ^ ^ ^ 

UB ed. vent ° lntormatio „ printed in the 

decrypting the <">«**^ de crypted information with the 
indicium ™^ " *c „ eMrypcea in£o „, atio „ 

20 :r::ri:iratior of ^ <* - — * 

digital signature may be used. 

machine readable. According y mail 
through reading means to scan the indicia ^ 

— - a t c :r e rcit"ro: « 

data are printed in *J°™^£*^ to Z of a bar-code, 
recognition »r -yj.^* . ^formation, the 

^c™ ^jTi— *- — — ie — 

» Seeing now „ ^ .ST^JT 

illustrates an example of a forma 
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and encrypted information in a machine readable part of an 
ana encrypt indicium 
indicium. The machine readable part of 



indicium. me m«^— — - _ ( er 

includes postage data composing a meter vendor s 
ma nufacturer<s identification 30 provided by a single 
5 digit . a postage meter identif .cation 31 provided by 

* a Piece count 32 of the number of mail items 

: ;:; sea v: h e ^t^ ^ « r : 

Ite representation 33 provided by a srngle digit, a 
^"a^ ^ounc 3, represented by a srnoie digit and . - 

comprising an encryption changed 
desired the order of the items of data ^ V 
and the encrypted authentication data 3 may be 
siqnature instead of encrypted information 
signature single digit and the 

X5 representation of date by a ^ 

representation of postage amount by a 9 
Scribed in our pending application GB 9623936.3- The 
de.cr.bed P ^ ^ separate the various 

■ symbols are usea xw 13 . rf > if 

«f data in the indicia. However in practice 

- EHb,;c:~":xr.r :::: :.-= 

be distinguished from a neighbouring data item. 

tn the flow chart of Figure 3, the 
Referring to tne i-x ( oter> 40) a 

c fhP nostaqe meter reaas (step 

25 r e i r r:r°:r: or ^-on'vo^u. - - 

^ miction o £ tne secret Ke, ^ to be 

dependence upon a code generated (step 41) r 
30 Printed in the ^JZ^ZZ - 

35 modified secret Key. in a ran dom 

unpredictable tor each -ii item £ ""^^^ 
manner dependent upon the postage data. The 
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secret key is Chen utilised (step 43) with an algorxthm to 
operate on at least a part of the postage data to generate 
^machine authentication code. Then an .n 
containing the postage data and authentication code xs 
s ZTL Itep 44) on the -11 xtem »"d the routxne xn 
respect of that mail item ends ( END 45) . 

Referring to the flow chart o£ Figure 4. when the mail 
" I hearing a postage indicia includxng £ 
l0 readable part is received by a postal autho xt> he 
machine readable data is read .step 5C» ^ a ^ 



reading device such as a scanner and the output 
scanner is input to a postal authorxty computer The 
cITuter utilises .step ,I> the vendor identification 30 
1S and the postage meter identification 31 to access a 1< 
up table to determine the secret Key approprxate to 
postage meter that printed the indicia on th 
mail item. The computer then modifies the sec 
TePendence upon a code generated in dependence u P o^ the 
2 0 postage data read from the mail item, in the same manne* 
L the postage meter generated the modified secret e, to 



generate a modified key corresponding to ^ ^T, Z 
secret key generated by the postage meter. Th ^ "» 
computer generates <step 52) the code from the postage 



25 



30 



35 



is 



data and utilises the code to generate (step 53) the 
modified secret key. The computer then utilises (step 54) 
Zt modified secret Key wit, an algorithm to operate on 
th e code generated from the postage data, ,n the same 
manner as the postage meter. to generate the max! 
authentication code 35. The computer then compares (step 
55) the authentication code generated in step 54 wxth the 
authentication code read from the mail item. If the -il 
authentication code generated hy the computer corresponds 
TvKS output of step 56) to the mail authentication code 
re ad in the machine readable part of the indxcxa printed 
on the mail item the postage indicia is authenticated and 
genuine and the mail item is accepted (step 57) . The 
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10 



15 



20 



25 



30 



r,r the indicium for that mail item then 
m^"" However if the mail authentication code 

ot step c. the mail — — - 

indic ::- ri zt:^ ^ « ,s " p h : 

*™1 ,s bearing a„ indicia which has been Panted 

in a fraudulent manner and chewing authentrcatron o Che 

ofr;™^ - — r - cur e 

= r^T-t- of the postage data to generate 

„r carts o£ the postage data id gener„,rn 9 the cod 
modify the Key ana to generate the authentication code. 

instead of modifying the key as described hereinbefore, or 

nation to edifying the Key. the data print- - 
machine readable part of the indicium may include a 
control value dependent upon the accumu ^ £ 
sending register of post ^""L^.. 
the credit value xn the creaxt i.ey 

th e control value may be dependent u o of^the 

— r::uir u :o a rr:rr a :::u rau iated ^ - 

TOa y oe equdx routine, 
credit value or may be derived from this sum. * 

» sub routine to be incorporated in the routine 
or a sub-routine minting an indicium 

il^trated * ^ ^L, J by the flow 

-gure I— r initiation ( START of the 

routine or ^-routine, the control value is genera ed 
(scep „, and the indici ~ " ^-J""^ 
indicium containing the control *- value If 
where the steps of Figure 5 are , sub-routine the sub 
routine may be carried out between steps 43 and 44 of 
flow chart of Figure 3. 
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The postage meter may be provided with registers in the 
non-volatile memories 15. 16 which store monthly totals of 
postage dispensed by the meter. • For example, there may be 
two such registers, one storing the amount of postage 
5 dispensed to date in a current period and which will 
continue to be incremented as postage is dispensed until 
the end of the current period and the other register 
storing the amount of postage dispensed in the period 
immediately preceding the current period. The start and 
10 finish of each period is determined by a real time clock 
29 communicating with the microprocessor 10. Conveniently 
each of the periods may be equal to one month. Instead of 
the control value being dependent upon the sum of the 
accumulated tote value and the credit value, the control 
15 value may be dependent upon the values stored in one or 
both of these two registers. For example the control 
value may be a check digit relating to the register 
storing the postage value dispensed in the preceding 
period or may be a range indicator related to an amount of 
20 postage predicted to be dispensed by the postage meter. 
The range indicator may be based on the amount of postage 
dispensed in the preceding period. 

It is preferred that the indicia printed on the mail item 
25 contains all the postage data required to enable 
authentication of the indicia at the postal authority. 
However, postage meters are subject to inspection at 
predetermined intervals either by physically taking the 
meter to the postal authority or by remote inspection via 

30 a communication link and in the course of such inspections 
data is read from the registers of the meter. Accordingly 
one or more items of postage data additional to those 
included in the postal indicia printed on the mail item 
may be communicated to the postal authority during each 

35 said inspection of the postage meter and these additional 
items of data may be utilised by the postal authority 

computer in authentication of the indicia printed on the 
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